[Openswan Users] RSA + XAUTH + Cisco reconnection failures
avagarwa at redhat.com
Fri Mar 5 17:07:20 EST 2010
On 03/04/2010 10:33 PM, Andrew Campbell wrote:
> One more thing I noted in the log file,
> Successful connection
> Mar 5 14:25:12 openswan pluto: "vpn" #1: XAUTH: Answering XAUTH
> challenge with user='test3'
> Mar 5 14:25:12 openswan pluto: "vpn" #1: transition from state
> STATE_XAUTH_I0 to state STATE_XAUTH_I1
> Failed connection
> Mar 5 14:26:41 openswan pluto: "vpn" #3: received and ignored
> informational message
> Mar 5 14:26:41 openswan pluto: "vpn" #3: XAUTH: Unsupported
> attribute: 21??
Not sure about your exact issue, but I just looked at
include/ietf_constants.h and found
CERT_TYPE_UNSUPPORTED = 21
Is there any cert type mismatch?
Why openswan reports "21" as unsupported attribute, that is another issue.
> Mar 5 14:26:43 openswan pluto: "vpn" #3: XAUTH: Answering XAUTH
> challenge with user='\317\257nK@\251\373\267'
> Andrew Campbell
> The information contained in this e-mail (including any attachments)
> is confidential. It is only intended for the recipient/s named above.
> If you are not the intended or one of the intended recipient/s any
> unauthorised use is prohibited. If you have received this e-mail in
> error, please notify the sender and destroy all copies of this e-mail.
> Confidentiality and legal privilege are not waived or lost as a result
> of mistaken delivery.
> Opinions expressed in this e-mail are those of the sender and unless
> expressly stated are not necessarily the opinions of Madison
> Technologies Pty Ltd.
> This email has been scanned by the MessageLabs Email Security System.
> For more information please visit http://www.messagelabs.com/email
> Users at openswan.org
> Building and Integrating Virtual Private Networks with Openswan:
More information about the Users